CVE-2021-32938

2021-06-1700:00:00

CWE-125

icscert

www.cve.org

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON

Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service condition or read sensitive information from memory.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Drawings SDK",
    "versions": [
      {
        "version": "All versions prior to 2022.4",
        "status": "affected"
      }
    ]
  }
]